Privacy Impact Assessment (Pia) Specialist - Senior

Hi,

This is Anjali from vTech Solution, Inc.

Hope you are doing well.

Wish to check if you would like to consider below job: If yes, kindly send me a copy of your resume in word format and work authorization status details.

Job Title:Privacy Impact Assessment (PIA) Specialist - Senior

Location: Toronto,ON

Duration: 12 Months + Possible Extension

Privacy Impact Assessment (PIA) Specialist

Description

Note: Ontario Health assets including laptops and related equipment cannot be removed from the province of Ontario without prior written approval from Ontario Health.

Note;This position is currently listed as "Hybrid" due to COVID-19 related work from home direction. Once Ontario Health staff are required to return to the office, the resource under this request may be required to work onsite as well.As such, any FFS resource awarded this position will be required to attest to being fully vaccinated against COVID-19 as supported by the OPS COVID-19 Safe Workplace Directive effective on October 1, 2021. After completing the attestation, you must show proof of vaccination to the Hiring Manager. Managers will not collect a copy of your vaccination proof. Valid proof of vaccination includes:

• A record of each dose of your vaccination, such as a receipt, card or confirmation from an international organization with a certified translation; or
• A QR code from the government’s COVID-19 certification app
• Receipt from the issuing vaccination clinic or pharmacy;
• An electronic vaccine receipt issued by the Government of Ontario or another province;

Must haves:

• Familiarity with the Personal Health Information Protection Act (PHIPA), and its related requirements for Health Information Network Providers (HINP) and Electronic Service Providers (ESP)
• Familiarity with Application Programming Interface (API) functionality and management
• Minimum 5 years’ direct operational level privacy experience preferably in a health sector and/or IT environment
• Minimum 5 years’ experience developing privacy policies and procedures, requirements, or controls
• Familiarity with Electronic Medical Record (EMR) or Hospital Information System (HIS) infrastructure, design, and data flows
• Minimum 5 years' experience drafting and reviewing privacy requirements for data sharing agreements
• Minimum of 3 years’ health privacy experience conducting privacy impact assessments (PIAs) on medium to high complexity projects

Deliverables include, but are not limited to:

• Reviewing and advising on agreements, including data sharing agreements
• Providing Privacy Consultation on a diverse range of complex, multi-stakeholder health privacy issues and Information Technology (IT) initiatives
• Developing privacy requirements for new or changing projects
• Developing risk mitigation plans
• Conducting/Completing Privacy Impact Assessments and associated documentation
• Create or inform the creation of data flow diagrams and associated privacy controls and compliance requirements

Responsibilities:

·Conducting/Completing Privacy Impact Assessments and associated documentation

·Providing Privacy Consultation on a diverse range of complex, multi-stakeholder health privacy issues and Information Technology (IT) initiatives

·Identify and assess privacy risks, including developing risk mitigation plans

·Create or inform the creation of data flow diagrams and associated privacy controls and compliance requirements

·Reviewing and advising on agreements, including data sharing agreements

·Developing privacy requirements for new or changing projects

·Providing privacy advisory and support to business teams

·Other duties as required

Desired Skills:

• Familiarity with Prescribed Entities (PEs) or Prescribed Persons (PP) under the Personal Health Information Protection Act (PHIPA), and their related requirements, is an asset
• Demonstrable knowledge ofprojectmanagement;Knowledge and understanding of Project Management’s Institute’s Project Management Body of Knowledge is an asset
• Knowledge and understanding of Accessibility for Ontarians with Disability Act (AODA) and related regulations and standards is an asset
• Familiarity with audit logging and Security Information and Event Management (SIEM) technology is an asset
• Experience working on and delivering multipleprojects
• Familiarity with technical data protection controls and technology such as encryption and tokenization is an asset
• Demonstrated project management software skills and experience e.g. MS Project, MS Teams etc.
• University undergraduate or graduate degree in Health, Computer Science, Engineering, Law, Security, or a related discipline from a recognized institution or equivalent experience – desired

Skills

Experience and Skill Set Requirements

Criteria

Criteria Details

Criterion Maximum Rating

Minimum 3 years’ health privacy experience conducting privacy impact assessments (PIAs) on medium to high complexity projects

20

Minimum 5 years’ direct operational level privacy experience in a health sector and/or IT environment or both

20

Minimum 5 years’ experience in developing privacy policies and procedures, requirements, or controls

20

Minimum 5 years’ experience drafting and reviewing privacy requirements for data sharing agreements

15

Familiarity with thePersonal Health Information Protection Act(PHIPA), andrequirements related to Health Information Network Provider (HINP) and Electronic Service Provider (ESP).

10

Familiarity with Application Programming Interface (API) functionality and management

7.5

Familiarity with Electronic Medical Record (EMR) or Hospital Information System (HIS) infrastructure, design, and data flows

7.5

Total

100%

Best Regards,

Anjali Rohal

Client Service Specialist (Canada)

vTech Solution, Inc.

You seek, We Deliver.

(437) 747-6699 (D)